Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ffe54ad-80c5-3716-80e2-c1f857cc3957.roa
File: 1ffe54ad-80c5-3716-80e2-c1f857cc3957.roa (raw, json)
Hash identifier: FhYHCG+oDRrAs8oDZqiTofBTKe/7alYfsmDDjXp+XKw=
Subject key identifier: 42:24:0D:C1:05:00:15:03:38:FF:26:FC:FF:18:67:F1:5E:9C:D5:DD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB001869D5CCE22A2A4D9FF
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ffe54ad-80c5-3716-80e2-c1f857cc3957.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 204.101.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:01:86:9d:5c:ce:22:a2:a4:d9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=fdf72c71-e808-473e-8910-678160f7fb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:6c:5f:55:8a:ab:48:70:f7:bb:3e:5c:95:
25:27:6a:ce:e8:72:27:86:a5:4d:ac:48:34:0b:14:
e7:5c:99:1b:24:04:51:f9:37:5a:b0:e0:ac:aa:84:
e2:99:27:f8:c6:a7:0d:95:3f:83:2a:99:cd:a6:7d:
fa:24:00:7f:c3:fe:55:e9:18:95:47:3d:5b:46:e7:
00:60:1f:1b:54:59:c3:7e:cb:85:cb:51:06:ae:94:
4e:4a:0a:e9:8d:20:2c:44:40:44:0b:3a:cc:c2:c1:
5d:d6:e6:0c:fd:54:f5:7c:24:5e:93:76:88:13:a2:
61:9b:fb:7d:dd:b3:ce:ba:aa:96:03:c1:33:a2:e0:
24:0c:f9:69:ac:8c:58:2c:bc:1d:fb:ef:1c:9a:ce:
b6:6a:9b:49:3f:52:fa:16:39:20:91:9c:3b:9e:cd:
25:ea:a2:24:1e:9e:38:80:d7:9f:20:b3:5c:eb:2c:
8d:e1:f7:0a:dc:4b:99:d1:db:d7:be:e1:38:0a:61:
43:0d:f6:d8:9b:57:34:72:a8:0a:b7:df:a9:69:6a:
1d:a1:ea:dd:ba:1a:4c:e4:11:0a:3a:0f:49:9c:e5:
25:90:66:2c:6a:71:e7:34:da:c7:3c:2e:7d:2c:a4:
6a:94:ea:bc:eb:ce:80:68:b1:12:6e:42:58:2a:4e:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:24:0D:C1:05:00:15:03:38:FF:26:FC:FF:18:67:F1:5E:9C:D5:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ffe54ad-80c5-3716-80e2-c1f857cc3957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:f8:36:7c:86:86:95:90:65:d5:ae:ce:be:0d:7d:d1:cf:18:
75:7c:ed:3b:e4:c6:60:de:4d:ea:09:f5:38:94:d3:f9:7c:a3:
ac:56:ed:3b:fc:6b:32:14:b3:8d:de:ea:5a:96:d9:65:1d:8e:
3b:bb:02:d7:28:97:31:34:cf:79:8d:7b:aa:fe:6b:12:f8:36:
0f:23:19:25:ef:70:90:e5:6a:22:15:c6:13:ce:c3:57:07:8d:
5a:ce:8a:e7:2b:5f:30:fd:dc:3b:cc:44:da:2f:6f:ed:a6:48:
87:41:3b:d5:c3:d5:41:f8:26:e8:a1:4a:6f:d1:39:c7:c9:0d:
c5:20:d1:0b:62:3b:22:23:29:4d:e7:2d:68:9d:da:91:99:7e:
7d:c4:a8:d6:99:51:6a:c8:5f:c8:30:71:56:6b:bb:36:46:39:
b2:be:aa:1f:3a:1a:4c:4e:27:c9:d1:63:d3:e6:2e:0a:2d:69:
7f:11:26:99:dc:bb:3f:6f:20:32:97:71:20:4d:43:0b:60:c1:
f5:4c:62:00:7a:2f:07:64:68:a5:2a:67:a7:85:59:11:b9:03:
e7:84:fc:e2:d6:4f:93:68:c6:25:2d:ab:3d:99:af:e0:8b:af:
b7:ca:57:18:21:03:8f:c1:34:f7:38:28:db:30:02:88:43:5c:
5d:7e:33:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org